$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/TkZSn7pQSmPHY_Knfy8oeT3PZz0.roa File: TkZSn7pQSmPHY_Knfy8oeT3PZz0.roa (raw, json) Hash identifier: 8mBNptqqkoQDRl+nRsgkuUpQ2+2zqItOCkXjSgxGuWw= Subject key identifier: 4E:46:52:9F:BA:50:4A:63:C7:63:F2:A7:7F:2F:28:79:3D:CF:67:3D Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221 Certificate serial: 0FA8 Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/TkZSn7pQSmPHY_Knfy8oeT3PZz0.roa Signing time: Wed 17 Apr 2024 07:38:12 +0000 ROA not before: Wed 17 Apr 2024 07:38:12 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 2914 IP address blocks: 180.223.32.0/21 maxlen: 24 180.223.48.0/21 maxlen: 24 180.223.56.0/21 maxlen: 24 180.223.152.0/21 maxlen: 24 180.223.192.0/21 maxlen: 24 180.223.200.0/21 maxlen: 24 180.223.208.0/21 maxlen: 24 180.223.216.0/21 maxlen: 24 180.223.232.0/21 maxlen: 24 180.223.240.0/21 maxlen: 24 180.223.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 22:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4008 (0xfa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221 Validity Not Before: Apr 17 07:38:12 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=4E46529FBA504A63C763F2A77F2F28793DCF673D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:55:f6:2a:16:36:61:45:b1:54:1a:49:fe:b7: 08:4d:63:bf:9d:01:ab:7d:7d:82:fe:9c:0e:ba:be: 97:0a:28:02:c0:3f:96:3e:72:d0:13:e1:c7:ab:81: c5:3e:87:d4:2f:75:48:8e:58:db:28:4e:24:00:b4: 48:e7:ad:53:51:88:f7:48:62:e7:c5:b1:a1:14:51: 06:a4:b8:bc:65:23:a6:d2:cd:00:f5:4b:7d:ef:3f: b0:c9:a2:9b:f1:32:b6:28:6a:7c:0c:c1:5b:7d:91: dc:7e:aa:4c:3a:8b:b6:3d:31:84:1e:26:20:11:f0: f7:68:c5:a0:41:15:18:e8:14:a5:53:4f:8b:e9:7a: 04:98:34:72:5b:d3:02:6a:c5:62:6f:59:e3:95:11: 72:9b:e1:bb:1a:ab:d9:da:31:99:8a:d5:89:0c:23: d2:29:cf:14:a5:b8:3f:f9:a7:e0:c3:10:be:e1:27: 26:e0:9d:b5:be:74:df:cf:80:6c:e5:bc:1e:28:70: 4b:4b:73:df:74:a4:a0:ad:0d:a1:a9:94:d6:da:4b: 0a:4f:0b:c3:2e:01:60:28:be:dd:29:7d:9c:94:50: 10:15:b7:6f:76:45:59:e8:fb:16:b7:b2:67:f7:8f: 2c:b6:40:f9:8e:c4:d7:1d:0f:48:45:b4:f0:9e:78: ce:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:46:52:9F:BA:50:4A:63:C7:63:F2:A7:7F:2F:28:79:3D:CF:67:3D X509v3 Authority Key Identifier: keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/TkZSn7pQSmPHY_Knfy8oeT3PZz0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.223.32.0/21 180.223.48.0/20 180.223.152.0/21 180.223.192.0/19 180.223.232.0-180.223.255.255 Signature Algorithm: sha256WithRSAEncryption ad:ed:62:6f:13:b3:0f:59:8c:d8:c4:04:9c:94:61:5a:6d:b8: 4d:b0:16:45:7a:54:2e:8a:92:b8:ae:ab:f9:4c:13:f1:17:8b: b1:87:f0:be:24:5c:a1:dc:42:44:0b:1f:f8:a7:23:2b:cd:b8: 82:b9:c5:6b:6d:0f:14:6a:5e:51:f5:d1:86:63:53:16:b5:9c: 52:9c:fd:d7:25:f6:74:85:79:cc:2a:c7:5b:8f:54:37:bd:ca: e0:8a:5d:e6:c2:5f:25:2f:e0:55:d0:d5:5b:95:e9:79:6e:80: 3d:a1:55:66:1d:2f:e8:d7:cb:b8:ea:20:bc:b2:76:3c:30:c7: 61:df:50:97:12:2c:4b:47:54:6b:12:06:06:1e:6f:3b:d5:71: df:a7:31:58:f1:31:df:28:94:1f:28:43:e4:29:5a:0d:cc:aa: 66:93:09:41:61:be:27:03:ec:29:77:07:0e:1c:38:41:d8:0a: c7:d8:73:65:bf:0e:21:1a:8a:6f:9d:e7:4c:b0:3c:21:cc:2c: 6b:e1:79:0e:65:98:37:47:d8:cc:cf:c4:37:94:3f:5d:6c:d5: 26:5e:fb:01:d3:7f:6d:80:f8:b6:07:ca:fc:d2:18:f3:5f:40: f3:93:a5:ee:85:4f:ad:53:70:b9:cf:37:49:12:da:f2:d1:ac: ca:f3:3a:40 -----BEGIN CERTIFICATE----- MIIE9jCCA96gAwIBAgICD6gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNDA0MTcw NzM4MTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDRFNDY1MjlGQkE1MDRB NjNDNzYzRjJBNzdGMkYyODc5M0RDRjY3M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZVfYqFjZhRbFUGkn+twhNY7+dAat9fYL+nA66vpcKKALAP5Y+ ctAT4cergcU+h9QvdUiOWNsoTiQAtEjnrVNRiPdIYufFsaEUUQakuLxlI6bSzQD1 S33vP7DJopvxMrYoanwMwVt9kdx+qkw6i7Y9MYQeJiAR8PdoxaBBFRjoFKVTT4vp egSYNHJb0wJqxWJvWeOVEXKb4bsaq9naMZmK1YkMI9IpzxSluD/5p+DDEL7hJybg nbW+dN/PgGzlvB4ocEtLc990pKCtDaGplNbaSwpPC8MuAWAovt0pfZyUUBAVt292 RVno+xa3smf3jyy2QPmOxNcdD0hFtPCeeM7fAgMBAAGjggISMIICDjAdBgNVHQ4E FgQUTkZSn7pQSmPHY/Knfy8oeT3PZz0wHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvVGtaU243cFFTbVBI WV9LbmZ5OG9lVDNQWnowLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDA+BggrBgEFBQcBBwEB/wQvMC0wKwQCAAEw JQMEA7TfIAMEBLTfMAMEA7TfmAMEBbTfwDALAwQDtN/oAwMFtMAwDQYJKoZIhvcN AQELBQADggEBAK3tYm8Tsw9ZjNjEBJyUYVptuE2wFkV6VC6Kkriuq/lME/EXi7GH 8L4kXKHcQkQLH/inIyvNuIK5xWttDxRqXlH10YZjUxa1nFKc/dcl9nSFecwqx1uP VDe9yuCKXebCXyUv4FXQ1VuV6XlugD2hVWYdL+jXy7jqILyydjwwx2HfUJcSLEtH VGsSBgYebzvVcd+nMVjxMd8olB8oQ+QpWg3MqmaTCUFhvicD7Cl3Bw4cOEHYCsfY c2W/DiEaim+d50ywPCHMLGvheQ5lmDdH2MzPxDeUP11s1SZe+wHTf22A+LYHyvzS GPNfQPOTpe6FT61TcLnPN0kS2vLRrMrzOkA= -----END CERTIFICATE-----Generated at Sun May 5 21:14:08 2024 by rpki-client on console-fra.rpki-client.org